Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
File:                     73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer (raw, json)
Hash identifier:          hYJ+TW1sP3rshT5BoVfMAs447OjHWYWwqlPstcBV8uY=
Subject key identifier:   92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584444F3BF9A90F1B47B96F68F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Dec 2023 17:45:14 +0000
Certificate not after:    Sun 19 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 36829
                          IP: 104.156.148.0/22
                          IP: 141.195.98.0/23
                          IP: 172.111.56.0/22
                          IP: 206.83.151.0/24
                          IP: 209.142.100.0/22
                          IP: 2602:fc64::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:44:f3:bf:9a:90:f1:b4:7b:96:f6:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 19 17:45:14 2023 GMT
            Not After : Oct 19 00:45:16 2025 GMT
        Subject: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:c1:82:f9:23:53:d2:12:31:42:3e:e4:fd:
                    a6:2c:58:71:da:70:63:5f:a8:43:1a:e6:e6:10:c8:
                    e9:e4:d3:0f:21:ae:c2:02:dd:f7:55:61:c2:57:69:
                    95:56:92:62:93:d6:57:96:97:d0:fa:3b:41:0f:d5:
                    77:ef:4e:a1:d0:29:49:f5:19:ce:c5:35:a6:2a:de:
                    6a:73:45:c7:62:09:1c:87:59:4c:5c:3e:52:12:40:
                    ff:c8:fc:4e:d5:93:c3:42:2a:2e:34:16:6e:c4:88:
                    66:7f:8b:e3:f7:fe:d8:8c:83:77:7f:48:16:9d:56:
                    2d:74:2a:34:d0:6a:34:63:81:eb:0c:4c:cc:2d:b2:
                    36:b3:19:9e:03:92:0e:ad:06:ce:74:3c:3d:67:24:
                    3c:38:c6:b1:c9:b4:ac:f8:f8:ee:b7:2e:a0:aa:d1:
                    2d:89:c2:1a:ac:fe:cf:d6:de:05:af:5d:f3:57:a0:
                    0f:3c:e6:8c:3c:49:93:8a:db:57:27:32:42:40:ec:
                    bc:91:a0:06:9f:25:c1:0b:fa:31:9d:76:04:6e:dd:
                    d0:95:50:fd:be:a2:7c:09:bc:85:b6:a5:a6:88:65:
                    8a:93:0d:7a:94:37:0d:50:ef:89:cd:0e:62:cc:9a:
                    7d:83:70:2f:ac:7e:50:a5:6c:bc:e4:22:74:d4:11:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.148.0/22
                  141.195.98.0/23
                  172.111.56.0/22
                  206.83.151.0/24
                  209.142.100.0/22
                IPv6:
                  2602:fc64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36829

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:dc:de:21:83:91:13:10:ad:0e:96:f0:78:02:e0:7c:b3:00:
         6a:fd:30:da:1b:86:ce:ff:25:bc:98:b2:31:0a:23:1e:54:24:
         7d:73:d2:fb:c2:ee:45:1f:7b:2d:3d:ab:9f:67:f4:26:82:a2:
         09:21:d4:f9:0d:38:01:96:bc:20:45:12:d6:a7:50:0d:ee:82:
         e9:18:fe:eb:0e:26:12:e8:1a:3f:44:e9:32:a4:87:91:ec:d3:
         ef:20:c6:d7:c0:96:96:c7:4c:c4:5d:e2:4e:c0:e4:38:8a:6e:
         53:7d:06:c3:61:93:9b:26:96:a4:9a:b5:de:e4:e9:b7:1c:97:
         bc:8d:60:19:76:f7:9f:e5:c0:65:97:55:60:54:8d:67:cd:7a:
         de:ed:08:79:61:d6:3a:c7:29:36:a2:5b:5e:3b:a3:6e:15:81:
         89:6e:8f:35:29:28:5f:51:aa:59:5c:33:44:a4:96:4a:fe:ef:
         c0:26:b5:21:21:5a:63:ca:7b:c5:9a:86:e3:60:ce:37:ab:e3:
         ac:4c:fb:85:eb:30:ac:8e:08:dd:be:22:aa:cb:ed:01:a1:7f:
         89:fa:0e:61:ee:39:79:da:d4:00:e0:60:77:9a:32:d0:a9:19:
         3f:b0:ab:c0:9f:81:c1:f5:2a:d1:fb:20:78:c4:e5:47:4c:4e:
         43:08:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:26:52 2024 by rpki-client on console-fra.rpki-client.org